Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-39835 (GCVE-0-2026-39835)
Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-08-20 12:31
VLAI
EPSS
VEX
Title
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
Summary
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
Severity
5.3 (Medium)
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-22 17:44 UTC
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
52 references
Impacted products
148 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| golang.org/x/crypto | golang.org/x/crypto/ssh |
Affected:
0 , < 0.52.0
(semver)
|
guessed | |
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-19 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
2:1.43.1-3.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
7:5.8.2-4.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260709093628.afee755d , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
6:5.8.2-4.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
2:1.43.1-3.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el8 |
||
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | external secrets operator for Red Hat OpenShift 1.1 |
Unaffected:
1786614676 , < *
(rpm)
cpe:/a:redhat:external_secrets_operator:1.1::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1784564438 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1784158679 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784738758 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785177359 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785177438 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785180878 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.6 |
Unaffected:
1784058822 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.6::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1781686446 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1782891812 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1781686458 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1782891789 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 |
Unaffected:
1783352589 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 |
Unaffected:
1782925137 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.11::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502022 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502465 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502025 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502494 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502401 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502403 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502023 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502029 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502445 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194638 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194353 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784196588 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784195620 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194309 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194144 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194188 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194653 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194980 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194347 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194971 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784128388 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784128860 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126780 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127787 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126762 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127762 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126832 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126774 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127791 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127135 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126733 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127775 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1783057515 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1783057529 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1783057884 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1783058067 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1783058284 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612432 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783611973 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612714 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783611805 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1784121108 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612119 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612163 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1785884688 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932114 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782931768 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932104 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536000 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783535989 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536515 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932521 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018461 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018421 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932812 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537001 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932919 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537586 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932969 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933015 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933042 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537392 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933235 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933251 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537955 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933417 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537742 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933602 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783019377 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934054 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934036 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934284 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.19 |
Unaffected:
1785149260 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.19::el8 |
||
| Red Hat | Red Hat OpenShift GitOps 1.2 |
Unaffected:
1785211346 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.20::el9 |
||
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1783750447 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
||
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1783751865 , < *
(rpm)
Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
||
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1784351966 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
||
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
||
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783968508 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783961973 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783968644 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783959819 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783969365 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783968972 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783330572 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783330691 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783326690 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783332061 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783332625 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783326847 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1782992727 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1782903492 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | ExternalDNS Operator |
cpe:/a:redhat:ext_dns_optr:1
|
||
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:6
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Trusted Artifact Signer |
cpe:/a:redhat:trusted_artifact_signer:1
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-39835",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-22T17:44:50.320380Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-22T17:45:10.853Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-19",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.43.1-3.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7:5.8.2-4.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260709093628.afee755d",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:5.8.2-4.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.43.1-3.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el8"
],
"defaultStatus": "affected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "external secrets operator for Red Hat OpenShift 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786614676",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784564438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784158679",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784738758",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-mustgather-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785177359",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-restic-restore-helper-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785177438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785180878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784058822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686446",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-rhel8-operator",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686446",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686446",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686446",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782891812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782891812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686458",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-rhel8-operator",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686458",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686458",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686458",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782891789",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782891789",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-operator-bundle",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-rhel9-operator",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782925137",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782925137",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502465",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502025",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502494",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502401",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502403",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502023",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502029",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502445",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194638",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194353",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784196588",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784195620",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194309",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-api-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194144",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-worker-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194188",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194653",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194144",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194980",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194347",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194971",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784128388",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784128860",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126780",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127787",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126762",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-api-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127762",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-worker-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126832",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126774",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127135",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126733",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127775",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-controller-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057515",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-git-cloner-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057529",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-image-bundler-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057884",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-image-processing-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783058067",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-webhook-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783058284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-controller-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612432",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-git-cloner-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783611973",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-image-bundler-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612714",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-image-processing-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783611805",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-rhel9-operator",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784121108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-webhook-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612163",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hyperkube-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785884688",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782931768",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/devicefinder-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932104",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536000",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783535989",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536515",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018421",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-blackbox-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537001",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932919",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932969",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933015",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933042",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-drbd-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933235",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933251",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537955",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933417",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537742",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933602",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783019377",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-mover-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934054",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785149260",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785211346",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783751865",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784353904",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-monitor-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/cosign-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783961973",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/fetch-tsa-certs-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/gitsign-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783959819",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-cli-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783969365",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/fulcio-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968972",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-backfill-redis-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783969365",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783969365",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/timestamp-authority-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/ctlog-monitor-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783330572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-monitor-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783330572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/cosign-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783330691",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/fetch-tsa-certs-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783326690",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/gitsign-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783332061",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-cli-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783332625",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/fulcio-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783326847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-backfill-redis-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783332625",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783332625",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/timestamp-authority-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783326690",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/model-validation-rhel9-operator",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782992727",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/policy-controller-rhel9-operator",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782903492",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "assisted/agent-preinstall-image-builder-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel9",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/cluster-logging-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/azure-service-operator-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-api-provider-azure-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-chains-controller-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-results-api-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-results-watcher-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-func-func-util-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-must-gather-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/volsync-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trainer-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/azure-service-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/lifecycle-agent-operator-bundle",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/lifecycle-agent-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/metallb-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-agent-installer-api-server-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-agent-installer-api-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-aws-ebs-csi-driver-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-azure-cluster-api-controllers-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-azure-cluster-api-controllers-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-azure-disk-csi-driver-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-azure-disk-csi-driver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-azure-file-csi-driver-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-azure-file-csi-driver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-baremetal-installer-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-baremetal-installer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-cluster-capi-rhel8-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-cluster-capi-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-csi-driver-manila-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-csi-driver-manila-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-csi-driver-nfs-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-csi-driver-nfs-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-csi-external-provisioner-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-csi-external-provisioner-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-docker-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-docker-builder-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-dpu-cni-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-dpu-daemon-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-dpu-intel-netsec-vsp-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-dpu-marvell-cp-agent-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-dpu-marvell-vsp-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-dpu-network-resources-injector-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-dpu-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-hyperkube",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-hypershift-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-ibmcloud-cluster-api-controllers-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-insights-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-installer",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-installer-altinfra-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-installer-altinfra-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-installer-artifacts",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-installer-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-installer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-kube-proxy-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-machine-api-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-machine-api-provider-aws-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-machine-api-provider-azure-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-machine-api-provider-azure-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-machine-api-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-machine-config-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-node-feature-discovery",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-rukpak-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-rukpak-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-openstack-cloud-controller-manager-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-openstack-cloud-controller-manager-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-ovn-kubernetes-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-powervs-block-csi-driver-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-ptp",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-ptp-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-smb-csi-driver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-support-log-gather-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-tests",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-tests-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-vsphere-cluster-api-controllers-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-vsphere-cluster-api-controllers-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-vsphere-csi-driver-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-vsphere-csi-driver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-vsphere-csi-driver-syncer-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-vsphere-csi-driver-syncer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/traefik-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-project-clone-rhel9",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "affected",
"packageName": "openshift4-wincw/windows-machine-config-operator-bundle",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "affected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/argocd-agent-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/argocd-agent-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/argocd-image-updater-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/argocd-image-updater-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/gitops-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/gitops-rhel8-operator",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/gitops-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/gitops-rhel9-operator",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "golang-googlecode-go-crypto",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-operator",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-operator-bundle",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-operator",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-operator-bundle",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/octavia-rhel9-operator",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/prometheus-podman-exporter-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-builder-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/model-transparency-cli-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/model-validation-agent-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/policy-controller-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/rhtas-console-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-operator-bundle",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-rhel8-operator",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-22T02:31:26.982Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS)."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T12:31:50.100Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"name": "RHBZ#2480680",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51036"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36199"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37072"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38504"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37410"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26546"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:52857"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:52910"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40969"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37268"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37286"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37296"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54525"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47949"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:51036: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36199: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:37072: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:37410: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:37123: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
},
{
"lang": "en",
"value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.4"
},
{
"lang": "en",
"value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
},
{
"lang": "en",
"value": "RHSA-2026:51038: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:52857: Red Hat OpenShift GitOps 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:52910: Red Hat OpenShift GitOps 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:42146: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:43052: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:42796: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:41031: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:40969: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37268: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37286: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37296: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:47949: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-22T04:01:27.279Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-22T02:31:26.982Z",
"value": "Made public."
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "golang.org/x/crypto/ssh",
"product": "golang.org/x/crypto/ssh",
"programRoutines": [
{
"name": "CertChecker.CheckHostKey"
},
{
"name": "CertChecker.Authenticate"
}
],
"vendor": "golang.org/x/crypto",
"versions": [
{
"lessThan": "0.52.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "NCC Group Cryptography Services, sponsored by Teleport"
}
],
"descriptions": [
{
"lang": "en",
"value": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-476: NULL Pointer Dereference",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-22T02:31:26.982Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/issue/79563"
},
{
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"url": "https://go.dev/cl/781660"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"title": "Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-39835",
"datePublished": "2026-05-22T02:31:26.982Z",
"dateReserved": "2026-04-07T18:13:03.529Z",
"dateUpdated": "2026-08-20T12:31:50.100Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-39835",
"date": "2026-08-20",
"epss": "0.00504",
"percentile": "0.41041"
},
"microsoft_vex": {
"current_release_date": "2026-07-06T14:41:50.000Z",
"cve": "CVE-2026-39835",
"id": "msrc_CVE-2026-39835",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:fixed": "16",
"product_status:known_affected": "21",
"product_status:known_not_affected": "2",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-39835.json",
"version": "12"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-39835\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-05-22T04:16:24.530\",\"lastModified\":\"2026-08-20T13:18:21.990\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.\"},{\"lang\":\"es\",\"value\":\"Servidores SSH que usan CertChecker como una devoluci\u00f3n de llamada de clave p\u00fablica sin configurar IsUserAuthority o IsHostAuthority podr\u00edan ser causados a entrar en p\u00e1nico por un cliente que presenta un certificado. CertChecker ahora devuelve un error en lugar de entrar en p\u00e1nico cuando estas devoluciones de llamada son nulas.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"golang.org/x/crypto\",\"product\":\"golang.org/x/crypto/ssh\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"golang.org/x/crypto/ssh\",\"programRoutines\":[{\"name\":\"CertChecker.CheckHostKey\"},{\"name\":\"CertChecker.Authenticate\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.52.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-19\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"2:1.43.1-3.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"7:5.8.2-4.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260709093628.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"6:5.8.2-4.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:1.43.1-3.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el8\"],\"versions\":[{\"version\":\"0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"external secrets operator for Red Hat OpenShift 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1.1::el9\"],\"versions\":[{\"version\":\"1786614676\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1784564438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1784158679\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784738758\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785177359\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-restic-restore-helper-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785177438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785180878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"],\"versions\":[{\"version\":\"1784058822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1781686446\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1781686446\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1781686446\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1781686446\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1782891812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-slim-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1782891812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1781686458\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1781686458\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1781686458\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1781686458\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1782891789\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-slim-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1782891789\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1782925137\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-slim-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1782925137\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502465\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502025\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502494\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502401\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502403\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502023\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502029\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502445\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194638\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784196588\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784195620\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194309\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-api-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194144\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-worker-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194188\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194653\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194144\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194980\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194347\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194971\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784128388\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784128860\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126780\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127787\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126762\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127762\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126832\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126774\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127135\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126733\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127775\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057515\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-git-cloner-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057529\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-image-bundler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057884\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-image-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783058067\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783058284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612432\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-git-cloner-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783611973\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-image-bundler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612714\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-image-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783611805\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1784121108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612163\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-hyperkube-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1785884688\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782931768\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/devicefinder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932104\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536000\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783535989\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536515\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018421\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-blackbox-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537001\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932919\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932969\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933015\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933042\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-drbd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933235\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933251\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537955\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933417\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537742\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933602\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783019377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-mover-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934054\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.19::el8\"],\"versions\":[{\"version\":\"1785149260\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.20::el9\"],\"versions\":[{\"version\":\"1785211346\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1783750447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1783751865\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784353904\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1784351966\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/cosign-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783961973\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/fetch-tsa-certs-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/gitsign-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783959819\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783969365\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/fulcio-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968972\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-backfill-redis-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783969365\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783969365\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/timestamp-authority-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/ctlog-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783330572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783330572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/cosign-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783330691\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/fetch-tsa-certs-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783326690\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/gitsign-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783332061\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783332625\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/fulcio-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783326847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-backfill-redis-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783332625\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783332625\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/timestamp-authority-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783326690\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/model-validation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1782992727\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/policy-controller-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1782903492\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"assisted/agent-preinstall-image-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-acmesolver-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-podvm-payload-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/cluster-logging-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/azure-service-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-api-provider-azure-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-api-provider-kubevirt-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-chains-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-results-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-results-watcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-func-func-util-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/volsync-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trainer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/azure-service-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/lifecycle-agent-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/lifecycle-agent-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/metallb-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/oc-mirror-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-api-server-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-api-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-csr-approver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-orchestrator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-aws-ebs-csi-driver-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-aws-ebs-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-aws-efs-csi-driver-container-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-aws-efs-csi-driver-container-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-azure-cluster-api-controllers-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-azure-cluster-api-controllers-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-azure-disk-csi-driver-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-azure-disk-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-azure-file-csi-driver-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-azure-file-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-baremetal-installer-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-baremetal-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cluster-capi-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cluster-capi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-csi-driver-manila-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-csi-driver-manila-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-csi-driver-nfs-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-csi-driver-nfs-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-csi-external-provisioner-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-csi-external-provisioner-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-docker-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-docker-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-dpu-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-dpu-daemon-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-dpu-intel-netsec-vsp-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-dpu-marvell-cp-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-dpu-marvell-vsp-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-dpu-network-resources-injector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-dpu-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hyperkube\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ibmcloud-cluster-api-controllers-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-insights-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer-altinfra-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer-altinfra-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer-artifacts\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-kube-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-machine-api-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-machine-api-provider-aws-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-machine-api-provider-azure-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-machine-api-provider-azure-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-machine-api-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-node-feature-discovery\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-olm-rukpak-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-olm-rukpak-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-openstack-cinder-csi-driver-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-openstack-cinder-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-openstack-cloud-controller-manager-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-openstack-cloud-controller-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ovn-kubernetes-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-powervs-block-csi-driver-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-powervs-block-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ptp\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ptp-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-smb-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-support-log-gather-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-tests\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-tests-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-vsphere-cluster-api-controllers-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-vsphere-cluster-api-controllers-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-vsphere-csi-driver-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-vsphere-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-vsphere-csi-driver-syncer-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-vsphere-csi-driver-syncer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/traefik-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-project-clone-rhel9\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-image-updater-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-image-updater-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/gitops-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/gitops-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/gitops-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/gitops-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-googlecode-go-crypto\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-operator\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-operator\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/octavia-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/prometheus-podman-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/model-transparency-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/model-validation-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/rhtas-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-22T17:44:50.320380Z\",\"id\":\"CVE-2026-39835\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*\",\"versionEndExcluding\":\"0.52.0\",\"matchCriteriaId\":\"D540395B-31B8-4B07-8F79-F5C631BBD5C8\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/781660\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://go.dev/issue/79563\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/a082jnz-LvI\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-5015\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26546\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36199\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36625\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37072\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37268\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37271\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37272\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37286\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37296\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37410\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38504\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40969\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40972\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40974\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41036\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42146\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43692\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46885\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47949\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51036\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:52857\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:52910\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54525\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-39835\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2480680\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-21T09:04:46+00:00",
"cve": "CVE-2026-39835",
"id": "CVE-2026-39835",
"initial_release_date": "2026-05-22T02:31:26.982000+00:00",
"product_status:fixed": "853",
"product_status:known_affected": "92",
"product_status:known_not_affected": "2046",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-08-21T01:11:33Z",
"cve": "CVE-2026-39835",
"id": "CVE-2026-39835",
"initial_release_date": "2026-05-23T01:29:03Z",
"product_status:known_affected": "347",
"product_status:known_not_affected": "267",
"product_status:recommended": "434",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-39835",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-39835.json",
"version": "38"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.43.1-3.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7:5.8.2-4.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260709093628.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:5.8.2-4.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.43.1-3.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"external secrets operator for Red Hat OpenShift 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786614676\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784564438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784158679\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784738758\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785177359\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-mustgather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785177438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-restic-restore-helper-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785180878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784058822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686446\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686446\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686446\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686446\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782891812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782891812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-slim-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686458\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686458\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686458\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686458\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782891789\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782891789\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-slim-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782925137\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782925137\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-slim-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502465\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502025\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502494\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502401\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502403\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502023\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502029\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502445\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194638\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194353\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784196588\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784195620\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194309\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194144\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-api-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194188\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-worker-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194653\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194144\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194980\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194347\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194971\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784128388\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784128860\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126780\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127787\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126762\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127762\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126832\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126774\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127135\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126733\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127775\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057515\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057529\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-git-cloner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057884\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-image-bundler-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783058067\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-image-processing-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783058284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-webhook-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612432\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783611973\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-git-cloner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612714\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-image-bundler-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783611805\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-image-processing-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784121108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612163\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-webhook-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785884688\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-hyperkube-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782931768\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932104\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/devicefinder-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536000\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783535989\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536515\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018421\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-blackbox-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537001\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932919\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932969\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933015\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933042\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-drbd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933235\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933251\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537955\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933417\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933602\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783019377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934054\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-mover-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785149260\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785211346\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783750447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783751865\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784353904\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784351966\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-monitor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783961973\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/cosign-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/fetch-tsa-certs-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783959819\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/gitsign-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783969365\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968972\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/fulcio-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783969365\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-backfill-redis-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783969365\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/timestamp-authority-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783330572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/ctlog-monitor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783330572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-monitor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783330691\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/cosign-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783326690\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/fetch-tsa-certs-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783332061\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/gitsign-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783332625\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783326847\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/fulcio-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783332625\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-backfill-redis-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783332625\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783326690\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/timestamp-authority-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782992727\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/model-validation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782903492\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/policy-controller-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"assisted/agent-preinstall-image-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-acmesolver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-podvm-payload-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/azure-service-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-api-provider-azure-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-api-provider-kubevirt-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-func-func-util-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/volsync-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trainer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/azure-service-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/lifecycle-agent-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/lifecycle-agent-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/metallb-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/oc-mirror-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-api-server-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-api-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-csr-approver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-orchestrator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-aws-ebs-csi-driver-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-aws-ebs-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-aws-efs-csi-driver-container-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-aws-efs-csi-driver-container-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-azure-cluster-api-controllers-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-azure-cluster-api-controllers-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-azure-disk-csi-driver-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-azure-disk-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-azure-file-csi-driver-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-azure-file-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-baremetal-installer-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-baremetal-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cluster-capi-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cluster-capi-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-csi-driver-manila-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-csi-driver-manila-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-csi-driver-nfs-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-csi-driver-nfs-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-csi-external-provisioner-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-csi-external-provisioner-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-docker-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-docker-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-dpu-cni-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-dpu-daemon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-dpu-intel-netsec-vsp-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-dpu-marvell-cp-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-dpu-marvell-vsp-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-dpu-network-resources-injector-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-dpu-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hyperkube\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ibmcloud-cluster-api-controllers-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-insights-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer-altinfra-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer-altinfra-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer-artifacts\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer-artifacts-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-kube-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-machine-api-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-machine-api-provider-aws-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-machine-api-provider-azure-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-machine-api-provider-azure-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-machine-api-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-node-feature-discovery\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-olm-rukpak-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-olm-rukpak-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-openstack-cinder-csi-driver-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-openstack-cinder-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-openstack-cloud-controller-manager-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-openstack-cloud-controller-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ovn-kubernetes-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-powervs-block-csi-driver-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-powervs-block-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ptp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ptp-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-smb-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-support-log-gather-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-tests\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-tests-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-vsphere-cluster-api-controllers-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-vsphere-cluster-api-controllers-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-vsphere-csi-driver-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-vsphere-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-vsphere-csi-driver-syncer-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-vsphere-csi-driver-syncer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/traefik-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-project-clone-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-agent-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-image-updater-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-image-updater-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/gitops-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/gitops-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/gitops-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/gitops-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-googlecode-go-crypto\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/octavia-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/prometheus-podman-exporter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/model-transparency-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/model-validation-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/rhtas-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-22T04:01:27.279Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-22T02:31:26.982Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51036: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:48151: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36199: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37072: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37410: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37123: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43692: OpenShift API for Data Protection 1.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51038: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:52857: Red Hat OpenShift GitOps 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:52910: Red Hat OpenShift GitOps 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42146: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43052: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42796: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41031: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40969: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37268: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37286: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37296: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46885: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47949: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47735: multicluster engine for Kubernetes 2.8\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-22T02:31:26.982Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-39835\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2480680\", \"name\": \"RHBZ#2480680\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51036\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36199\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37072\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38504\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37410\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37123\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26546\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36625\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36207\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41036\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:52857\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:52910\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42146\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40972\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40974\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40969\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37271\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37268\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37272\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37296\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54525\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46885\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47949\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-476\", \"description\": \"NULL Pointer Dereference\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-18T12:05:23.439Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-39835\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-22T17:44:50.320380Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-22T17:45:06.921Z\"}}], \"cna\": {\"title\": \"Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh\", \"credits\": [{\"lang\": \"en\", \"value\": \"NCC Group Cryptography Services, sponsored by Teleport\"}], \"affected\": [{\"vendor\": \"golang.org/x/crypto\", \"product\": \"golang.org/x/crypto/ssh\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.52.0\", \"versionType\": \"semver\"}], \"packageName\": \"golang.org/x/crypto/ssh\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"CertChecker.CheckHostKey\"}, {\"name\": \"CertChecker.Authenticate\"}]}], \"references\": [{\"url\": \"https://go.dev/issue/79563\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/a082jnz-LvI\"}, {\"url\": \"https://go.dev/cl/781660\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-5015\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-476: NULL Pointer Dereference\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-05-22T02:31:26.982Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-39835\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-18T12:05:23.439Z\", \"dateReserved\": \"2026-04-07T18:13:03.529Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-05-22T02:31:26.982Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:40974
Vulnerability from csaf_redhat - Published: 2026-07-16 11:19 - Updated: 2026-08-21 09:06Summary
Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Vendor Fix
fix
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Vendor Fix
fix
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/<buildId>/<page>.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. This vulnerability allows an attacker to bypass security checks in web applications that use Next.js middleware to protect specific web pages. By sending specially crafted web addresses, an attacker can access protected content without proper authorization. This could lead to unauthorized viewing of sensitive information or access to restricted features.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. App Router applications that use middleware or proxy-based authorization checks are vulnerable to unauthorized access. A remote attacker can exploit this by crafting specific .rsc and segment-prefetch URLs, which bypass the intended middleware rules. This allows access to protected content without proper authorization.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /_next/image endpoint. This can lead to out-of-memory conditions, resulting in a Denial of Service (DoS) for the application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery (SSRF) through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or external destinations. This could lead to the exposure of internal services or sensitive cloud metadata endpoints.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open, consuming server resources and ultimately leading to a Denial of Service (DoS) for legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 | — |
Workaround
|
Threats
Impact
Important
References
116 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40974",
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44573",
"url": "https://access.redhat.com/security/cve/CVE-2026-44573"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44574",
"url": "https://access.redhat.com/security/cve/CVE-2026-44574"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44575",
"url": "https://access.redhat.com/security/cve/CVE-2026-44575"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44577",
"url": "https://access.redhat.com/security/cve/CVE-2026-44577"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44578",
"url": "https://access.redhat.com/security/cve/CVE-2026-44578"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44579",
"url": "https://access.redhat.com/security/cve/CVE-2026-44579"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45109",
"url": "https://access.redhat.com/security/cve/CVE-2026-45109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40974.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-08-21T09:06:55+00:00",
"generator": {
"date": "2026-08-21T09:06:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:40974",
"initial_release_date": "2026-07-16T11:19:42+00:00",
"revision_history": [
{
"date": "2026-07-16T11:19:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T09:06:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.3",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-backfill-redis-rhel9@sha256%3A28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-backfill-redis-rhel9\u0026tag=1783969365"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"product": {
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"product_id": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/certificate-transparency-rhel9@sha256%3Ab713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/certificate-transparency-rhel9\u0026tag=1783968468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-database-rhel9@sha256%3Acbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-database-rhel9\u0026tag=1783960127"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"product": {
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"product_id": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fulcio-rhel9@sha256%3Addeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/fulcio-rhel9\u0026tag=1783968972"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-logserver-rhel9@sha256%3A716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-logserver-rhel9\u0026tag=1783968861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-logsigner-rhel9@sha256%3Aa480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-logsigner-rhel9\u0026tag=1783968861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-redis-rhel9@sha256%3Ae4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-redis-rhel9\u0026tag=1783411108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-search-ui-rhel9@sha256%3A8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-search-ui-rhel9\u0026tag=1783958622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-server-rhel9@sha256%3A03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-server-rhel9\u0026tag=1783969365"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"product": {
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"product_id": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/timestamp-authority-rhel9@sha256%3Acc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/timestamp-authority-rhel9\u0026tag=1783968644"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64"
},
"product_reference": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64"
},
"product_reference": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
},
"product_reference": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-44573",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:01:50.343509+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477199"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Next.js applications allows unauthorized access to sensitive server-side rendered (SSR) JSON data by bypassing middleware authorization checks. This occurs when applications use the Pages Router with internationalization (i18n) and middleware or proxy-based authorization, enabling remote attackers to retrieve protected page data through locale-less requests.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44573"
},
{
"category": "external",
"summary": "RHBZ#2477199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44573",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44573"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5"
}
],
"release_date": "2026-05-13T16:48:16.218000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n"
},
{
"cve": "CVE-2026-44574",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:02:21.088167+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. This vulnerability allows an attacker to bypass security checks in web applications that use Next.js middleware to protect specific web pages. By sending specially crafted web addresses, an attacker can access protected content without proper authorization. This could lead to unauthorized viewing of sensitive information or access to restricted features.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Authorization bypass via crafted query parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important authorization bypass flaw in Next.js applications, which are utilized in Red Hat AMQ, Red Hat Trusted Artifact Signer, and Red Hat Enterprise Linux AI. The vulnerability arises when applications use Next.js middleware to protect dynamic routes, allowing attackers to access restricted content by manipulating query parameters. This bypass occurs because specially crafted parameters can alter the route value seen by the page while the visible path remains unchanged, circumventing intended security controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44574"
},
{
"category": "external",
"summary": "RHBZ#2477207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44574",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44574"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44574",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44574"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv"
}
],
"release_date": "2026-05-13T16:56:06.008000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Authorization bypass via crafted query parameters"
},
{
"cve": "CVE-2026-44575",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:01:17.168356+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477188"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. App Router applications that use middleware or proxy-based authorization checks are vulnerable to unauthorized access. A remote attacker can exploit this by crafting specific .rsc and segment-prefetch URLs, which bypass the intended middleware rules. This allows access to protected content without proper authorization.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Unauthorized access to protected content via middleware bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Next.js App Router applications that utilize middleware or proxy-based authorization. A remote attacker can bypass these security checks by crafting specific URLs, leading to unauthorized access to protected content. This is due to transport-specific route variants used for segment prefetching not being consistently matched by middleware rules.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44575"
},
{
"category": "external",
"summary": "RHBZ#2477188",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477188"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44575",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44575"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f"
}
],
"release_date": "2026-05-13T16:54:39.455000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Unauthorized access to protected content via middleware bypass"
},
{
"cve": "CVE-2026-44577",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T18:01:35.713847+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477194"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /_next/image endpoint. This can lead to out-of-memory conditions, resulting in a Denial of Service (DoS) for the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Denial of Service via Image Optimization API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Next.js affects self-hosted applications utilizing the default image loader. A remote attacker can trigger a denial of service by requesting large local image assets, leading to out-of-memory conditions. This vulnerability is present when `images.localPatterns` is configured to allow all patterns by default, and is not applicable when using Vercel, a custom image loader, or `images.unoptimized: true`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44577"
},
{
"category": "external",
"summary": "RHBZ#2477194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44577"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh"
}
],
"release_date": "2026-05-13T17:00:02.786000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Denial of Service via Image Optimization API"
},
{
"cve": "CVE-2026-44578",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-05-13T18:01:13.729805+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery (SSRF) through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or external destinations. This could lead to the exposure of internal services or sensitive cloud metadata endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Next.js affects self-hosted applications, including Red Hat AMQ, when using the built-in Node.js server. A remote attacker can exploit specially crafted WebSocket upgrade requests to perform Server-Side Request Forgery, potentially exposing internal network services or sensitive cloud metadata endpoints. This risk is specific to deployments where the origin server is directly exposed to untrusted networks.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44578"
},
{
"category": "external",
"summary": "RHBZ#2477187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44578"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r"
}
],
"release_date": "2026-05-13T17:01:38.942000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests"
},
{
"cve": "CVE-2026-44579",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"discovery_date": "2026-05-13T18:01:32.406247+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477193"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open, consuming server resources and ultimately leading to a Denial of Service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Denial of Service via crafted POST requests to server actions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important as Next.js applications configured with Partial Prerendering and Cache Components are susceptible to a remote denial of service. An unauthenticated attacker can exhaust server connections by sending specially crafted POST requests, leading to a complete disruption of service for legitimate users. This impact is significant due to the potential for widespread unavailability of affected web applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44579"
},
{
"category": "external",
"summary": "RHBZ#2477193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477193"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44579"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx"
}
],
"release_date": "2026-05-13T17:04:28.388000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Denial of Service via crafted POST requests to server actions"
},
{
"cve": "CVE-2026-45109",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-13T18:01:23.402405+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477190"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Next.js allows a remote unauthenticated attacker to bypass a prior security fix when applications utilize `middleware.ts` with Turbopack. This bypass undermines intended access controls, potentially leading to the exposure of sensitive information in affected Red Hat AMQ and Red Hat Trusted Artifact Signer deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45109"
},
{
"category": "external",
"summary": "RHBZ#2477190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45109"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6"
}
],
"release_date": "2026-05-13T17:11:07.275000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:19:42+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:41019
Vulnerability from csaf_redhat - Published: 2026-07-16 14:35 - Updated: 2026-08-21 12:19Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Security fixes:
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)
* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
References
182 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\nRed Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\nRed Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.\n\nSecurity fixes:\n\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)\n* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)\n* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)\n* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)\n* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)\n* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41019",
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap",
"url": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp#edge-manager-verify-rhem-acm-console",
"url": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp#edge-manager-verify-rhem-acm-console"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41019.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-08-21T12:19:49+00:00",
"generator": {
"date": "2026-08-21T12:19:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41019",
"initial_release_date": "2026-07-16T14:35:59+00:00",
"revision_history": [
{
"date": "2026-07-16T14:35:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-16T14:35:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T12:19:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEM 1.1 for RHEL 10",
"product": {
"name": "RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
}
}
},
{
"category": "product_name",
"name": "RHEM 1.1 for RHEL 9",
"product": {
"name": "RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-0:1.1.3-1.el10em.src",
"product": {
"name": "flightctl-0:1.1.3-1.el10em.src",
"product_id": "flightctl-0:1.1.3-1.el10em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.1.3-1.el10em?arch=src"
}
}
},
{
"category": "product_version",
"name": "flightctl-0:1.1.3-1.el9em.src",
"product": {
"name": "flightctl-0:1.1.3-1.el9em.src",
"product_id": "flightctl-0:1.1.3-1.el9em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.1.3-1.el9em?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product": {
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product_id": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.1.3-1.el10em?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product": {
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product_id": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.1.3-1.el9em?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.1.3-1.el10em.src as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src"
},
"product_reference": "flightctl-0:1.1.3-1.el10em.src",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch"
},
"product_reference": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.1.3-1.el9em.src as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src"
},
"product_reference": "flightctl-0:1.1.3-1.el9em.src",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch"
},
"product_reference": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:41031
Vulnerability from csaf_redhat - Published: 2026-07-16 14:37 - Updated: 2026-08-21 09:06Summary
Red Hat Security Advisory: Red Hat Quay 3.10.24
Severity
Important
Notes
Topic: Red Hat Quay 3.10.24 is now available with bug fixes.
Details: Quay 3.10.24
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
References
181 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.10.24 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.10.24",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41031",
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41031.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.10.24",
"tracking": {
"current_release_date": "2026-08-21T09:06:53+00:00",
"generator": {
"date": "2026-08-21T09:06:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41031",
"initial_release_date": "2026-07-16T14:37:20+00:00",
"revision_history": [
{
"date": "2026-07-16T14:37:20+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T09:06:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.1",
"product": {
"name": "Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.10::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Ade47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783750794"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Aa7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783749879"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Acef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783750752"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Abf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783749646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Aa2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783750520"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783749793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783754116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783750939"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783750447"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783749879"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Aa8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783749646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Ab1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783749793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783750939"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783750447"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ac0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783749879"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Abdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783749646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783749793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783750939"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783750447"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:41036
Vulnerability from csaf_redhat - Published: 2026-07-16 15:12 - Updated: 2026-08-21 12:19Summary
Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.1
Severity
Important
Notes
Topic: Red Hat OpenShift Builds 1.8.1
Details: Releases of Red Hat OpenShift Builds 1.8.1
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants' Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Workaround
|
Threats
Impact
Important
References
111 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.8.1",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.8.1",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41036",
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10840",
"url": "https://access.redhat.com/security/cve/CVE-2026-10840"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.8",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.8"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41036.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.1",
"tracking": {
"current_release_date": "2026-08-21T12:19:49+00:00",
"generator": {
"date": "2026-08-21T12:19:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41036",
"initial_release_date": "2026-07-16T15:12:39+00:00",
"revision_history": [
{
"date": "2026-07-16T15:12:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T12:19:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.8.1",
"product": {
"name": "Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.8::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Ad8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783612432"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Adb72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783611973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783612714"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783611805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Aa99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1784121108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3Afae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-operator-bundle\u0026tag=1784191184"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783337391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783337535"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783612119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783612163"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Ad18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783612432"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Ac8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783611973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aaad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783612714"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Ace5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783611805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1784121108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783337391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783337535"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783612119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783612163"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783612432"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783611973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Af9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783612714"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Af5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783611805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ab66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1784121108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783337391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783337535"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783612119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783612163"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783612432"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783611973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Acaba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783612714"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783611805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ad08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1784121108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783337391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ae1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783337535"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Af49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783612119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783612163"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Christopher Lusk"
],
"organization": "North Echo Security Research"
}
],
"cve": "CVE-2026-10840",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2026-04-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants\u0027 Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the OpenShift Pipelines operator where the `tekton-scheduler-rolebinding` grants `system:authenticated` users cluster-wide write access to Kueue and cert-manager resources. This allows any authenticated user to disrupt workload scheduling, manipulate priorities, delete Workload objects, or may overwrite TLS Secrets, such as the default ingress controller certificate, by leveraging cert-manager\u0027s privileges. The vulnerable RBAC objects are deployed regardless of whether the Tekton Scheduler feature is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10840"
},
{
"category": "external",
"summary": "RHBZ#2484720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10840",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10840"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10840",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10840"
}
],
"release_date": "2026-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "If the Tekton Scheduler feature is not in use, administrators can mitigate this by patching the ClusterRoleBinding to reference a specific ServiceAccount instead of system:authenticated:\n\noc patch clusterrolebinding tekton-scheduler-rolebinding --type=merge -p \u0027{\"subjects\": [{\"kind\": \"ServiceAccount\", \"name\": \"openshift-pipelines-operator\", \"namespace\": \"openshift-operators\"}]}\u0027\n\nIMPORTANT: The OpenShift Pipelines operator\u0027s reconciliation loop may revert this manual patch. Verify that the operator does not reconcile this binding back to system:authenticated after applying the mitigation. If it does, scale down the operator deployment or configure the operator to skip reconciliation of this object.\n\nAlternatively, the ClusterRoleBinding can be deleted if the Tekton Scheduler is not enabled.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:41066
Vulnerability from csaf_redhat - Published: 2026-07-16 19:46 - Updated: 2026-08-21 09:06Summary
Red Hat Security Advisory: Red Hat Quay 3.16.5
Severity
Important
Notes
Topic: Red Hat Quay 3.16.5 is now available with bug fixes.
Details: Quay 3.16.5
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
References
254 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.16.5 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.16.5",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41066",
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10143",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41066.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.16.5",
"tracking": {
"current_release_date": "2026-08-21T09:06:55+00:00",
"generator": {
"date": "2026-08-21T09:06:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41066",
"initial_release_date": "2026-07-16T19:46:27+00:00",
"revision_history": [
{
"date": "2026-07-16T19:46:27+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T09:06:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.16",
"product": {
"name": "Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783749869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783749615"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783748503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783961339"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ab17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Aa557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Af51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aa4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ac65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Afe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"relates_to_product_reference": "Red Hat Quay 3.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-10143",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-10T21:02:14.712750+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client\u0027s event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "RHBZ#2487722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b",
"url": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3019",
"url": "https://github.com/dpkp/kafka-python/pull/3019"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3026",
"url": "https://github.com/dpkp/kafka-python/pull/3026"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py",
"url": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py"
}
],
"release_date": "2026-06-10T20:22:39.262000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
RHSA-2026:42146
Vulnerability from csaf_redhat - Published: 2026-07-20 18:41 - Updated: 2026-08-21 09:06Summary
Red Hat Security Advisory: Red Hat Quay 3.12.20
Severity
Important
Notes
Topic: Red Hat Quay 3.12.20 is now available with bug fixes.
Details: Quay 3.12.20
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
References
173 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.20 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.20",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42146",
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42146.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.12.20",
"tracking": {
"current_release_date": "2026-08-21T09:06:59+00:00",
"generator": {
"date": "2026-08-21T09:06:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42146",
"initial_release_date": "2026-07-20T18:41:52+00:00",
"revision_history": [
{
"date": "2026-07-20T18:41:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T09:06:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.12",
"product": {
"name": "Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.12::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783751331"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Aa3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Ad5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783751577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Af17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Abf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783750687"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aa72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783756364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Adb891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aa91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Af6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ac5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aa4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:42796
Vulnerability from csaf_redhat - Published: 2026-07-21 13:53 - Updated: 2026-08-21 09:07Summary
Red Hat Security Advisory: Red Hat Quay 3.15.6
Severity
Important
Notes
Topic: Red Hat Quay 3.15.6 is now available with bug fixes.
Details: Quay 3.15.6
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
References
217 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.15.6 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.15.6",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42796",
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10143",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42796.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.15.6",
"tracking": {
"current_release_date": "2026-08-21T09:07:03+00:00",
"generator": {
"date": "2026-08-21T09:07:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42796",
"initial_release_date": "2026-07-21T13:53:09+00:00",
"revision_history": [
{
"date": "2026-07-21T13:53:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T09:07:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.15",
"product": {
"name": "Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.15::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Ab42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1784352323"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1784352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ae328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784352052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Abdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1784356254"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Af6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ace5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aefcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-10143",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-10T21:02:14.712750+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client\u0027s event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "RHBZ#2487722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b",
"url": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3019",
"url": "https://github.com/dpkp/kafka-python/pull/3019"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3026",
"url": "https://github.com/dpkp/kafka-python/pull/3026"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py",
"url": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py"
}
],
"release_date": "2026-06-10T20:22:39.262000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
RHSA-2026:43052
Vulnerability from csaf_redhat - Published: 2026-07-21 22:47 - Updated: 2026-08-21 09:07Summary
Red Hat Security Advisory: Red Hat Quay 3.12.20
Severity
Important
Notes
Topic: Red Hat Quay 3.12.20 is now available with bug fixes.
Details: Quay 3.12.20
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
References
173 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.20 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.20",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:43052",
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43052.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.12.20",
"tracking": {
"current_release_date": "2026-08-21T09:07:04+00:00",
"generator": {
"date": "2026-08-21T09:07:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:43052",
"initial_release_date": "2026-07-21T22:47:21+00:00",
"revision_history": [
{
"date": "2026-07-21T22:47:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T09:07:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.12",
"product": {
"name": "Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.12::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1784356439"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ac3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1784355382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Adc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784353500"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aeeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1784358506"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ad8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Adc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aa661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Afe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aaec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ae74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:43692
Vulnerability from csaf_redhat - Published: 2026-07-22 15:57 - Updated: 2026-08-21 12:20Summary
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
Severity
Important
Notes
Topic: A new version of OpenShift API for Data Protection (OADP) is now available.
Details: OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSH_AGENT_SUCCESS (0x06) message to requests expecting typed replies (e.g., List, Sign). The unmarshal layer produces an unexpected message type, which the client code does not handle, leading to panic("unreachable") or a nil-pointer dereference. A malicious agent or forwarded connection can exploit this to terminate the client process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.
4.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user's browser.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. An authenticated SSH client can cause a Denial of Service (DoS) by repeatedly opening channels that are rejected by the server. This leads to unbounded memory growth, eventually crashing the server process and affecting all connected users.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. An attacker could provide specially crafted inputs that, when processed, lead to the creation of an ed25519.PrivateKey by casting malformed wire bytes. This improper input handling can cause the program to panic and crash, resulting in a Denial of Service (DoS) for the affected component.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
References
284 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:43692",
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47911",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47913",
"url": "https://access.redhat.com/security/cve/CVE-2025-47913"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47914",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58181",
"url": "https://access.redhat.com/security/cve/CVE-2025-58181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58190",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25680",
"url": "https://access.redhat.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39817",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39823",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39825",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39826",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39827",
"url": "https://access.redhat.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39834",
"url": "https://access.redhat.com/security/cve/CVE-2026-39834"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40356",
"url": "https://access.redhat.com/security/cve/CVE-2026-40356"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42506",
"url": "https://access.redhat.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46598",
"url": "https://access.redhat.com/security/cve/CVE-2026-46598"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43692.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
"tracking": {
"current_release_date": "2026-08-21T12:20:10+00:00",
"generator": {
"date": "2026-08-21T12:20:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:43692",
"initial_release_date": "2026-07-22T15:57:51+00:00",
"revision_history": [
{
"date": "2026-07-22T15:57:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T12:20:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift API for Data Protection 1.6",
"product": {
"name": "OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift API for Data Protection"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1784059134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3A9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1784058832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-controller-rhel9@sha256%3A0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9\u0026tag=1784058953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-plugin-rhel9@sha256%3A5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9\u0026tag=1784058704"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1784058446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1784058949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1784059055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1784059086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-operator-bundle@sha256%3A1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1784060839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1784058822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1784058872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1784058666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ac9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1784058364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Ae3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1784058385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1784059058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vm-file-restore-rhel9@sha256%3Ac1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vm-file-restore-rhel9\u0026tag=1784058431"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmdp-binaries-rhel9@sha256%3A8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9\u0026tag=1784059187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-rhel9@sha256%3A14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-rhel9\u0026tag=1784059129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-filebrowser-rhel9@sha256%3Ae6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9\u0026tag=1784058355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-sshd-rhel9@sha256%3A6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9\u0026tag=1784058384"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Aa5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1784059134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3Acc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1784058832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-controller-rhel9@sha256%3A2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9\u0026tag=1784058953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-plugin-rhel9@sha256%3A7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9\u0026tag=1784058704"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Ab209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1784058446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1784058949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1784059055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ad7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1784059086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1784058822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Ac5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1784058872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1784058666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ab2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1784058364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1784058385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Addbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1784059058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vm-file-restore-rhel9@sha256%3Acee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vm-file-restore-rhel9\u0026tag=1784058431"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmdp-binaries-rhel9@sha256%3A7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9\u0026tag=1784059187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-rhel9@sha256%3A759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-rhel9\u0026tag=1784059129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-filebrowser-rhel9@sha256%3A41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9\u0026tag=1784058355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-sshd-rhel9@sha256%3A88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9\u0026tag=1784058384"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Af004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1784059134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3A6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1784058832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-controller-rhel9@sha256%3Ac2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9\u0026tag=1784058953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-plugin-rhel9@sha256%3Ab533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9\u0026tag=1784058704"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Ab15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1784058446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1784058949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1784059055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1784059086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ae3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1784058822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1784058872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1784058666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1784058364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Ac14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1784058385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1784059058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"product_id": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmdp-binaries-rhel9@sha256%3A8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9\u0026tag=1784059187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-rhel9@sha256%3A9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-rhel9\u0026tag=1784059129"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1784059134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3A7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1784058832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-controller-rhel9@sha256%3A5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9\u0026tag=1784058953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-plugin-rhel9@sha256%3Af723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9\u0026tag=1784058704"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1784058446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ab78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1784058949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1784059055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1784059086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Afdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1784058822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1784058872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1784058666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ac2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1784058364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Ae659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1784058385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1784059058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmdp-binaries-rhel9@sha256%3Afe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9\u0026tag=1784059187"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-47911",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-02-05T18:01:23.423406+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437109"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: The `golang.org/x/net/html` package, used across various Red Hat products, is vulnerable to a denial of service due to quadratic parsing complexity in its `html.Parse` function. An attacker providing specially crafted HTML content could exploit this flaw, leading to resource exhaustion and service unavailability in applications that process untrusted HTML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "RHBZ#2437109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4440",
"url": "https://github.com/golang/vulndb/issues/4440"
},
{
"category": "external",
"summary": "https://go.dev/cl/709876",
"url": "https://go.dev/cl/709876"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4440",
"url": "https://pkg.go.dev/vuln/GO-2026-4440"
}
],
"release_date": "2026-02-05T17:48:44.562000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html"
},
{
"cve": "CVE-2025-47913",
"discovery_date": "2025-11-13T22:01:26.092452+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2414943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSH_AGENT_SUCCESS (0x06) message to requests expecting typed replies (e.g., List, Sign). The unmarshal layer produces an unexpected message type, which the client code does not handle, leading to panic(\"unreachable\") or a nil-pointer dereference. A malicious agent or forwarded connection can exploit this to terminate the client process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was marked as Important because it allows any malicious or misbehaving SSH agent to force a crash in the client process using a single valid protocol byte. The panic occurs before the client has a chance to validate message structure or recover, which means an attacker controlling\u2014or intercepting\u2014SSH agent traffic can reliably terminate processes that rely on agent interactions. In environments where SSH agents operate over forwarded sockets, shared workspaces, or CI/CD runners, this turns into a reliable, unauthenticated remote denial of service against critical automation or developer tooling. The flaw also stems from unsafe assumptions in the unmarshalling logic, where unexpected but protocol-legal message types drop into \u201cunreachable\u201d code paths instead of being handled gracefully\u2014making it a design-level reliability break rather than a simple error-handling bug. For this reason, it is rated as an important availability-impacting vulnerability rather than a moderate issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47913"
},
{
"category": "external",
"summary": "RHBZ#2414943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47913"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47913",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47913"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-hcg3-q754-cr77",
"url": "https://github.com/advisories/GHSA-hcg3-q754-cr77"
},
{
"category": "external",
"summary": "https://go.dev/cl/700295",
"url": "https://go.dev/cl/700295"
},
{
"category": "external",
"summary": "https://go.dev/issue/75178",
"url": "https://go.dev/issue/75178"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4116",
"url": "https://pkg.go.dev/vuln/GO-2025-4116"
}
],
"release_date": "2025-11-13T21:29:39.907000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS"
},
{
"cve": "CVE-2025-47914",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-19T21:01:06.202641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416000"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. The golang.org/x/crypto/ssh/agent library, when used in SSH Agent servers, does not properly validate the size of messages during new identity requests. A specially crafted malformed message can lead to an out-of-bounds read, causing the program to panic and resulting in a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "RHBZ#2416000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://go.dev/cl/721960",
"url": "https://go.dev/cl/721960"
},
{
"category": "external",
"summary": "https://go.dev/issue/76364",
"url": "https://go.dev/issue/76364"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4135",
"url": "https://pkg.go.dev/vuln/GO-2025-4135"
}
],
"release_date": "2025-11-19T20:33:43.126000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages"
},
{
"cve": "CVE-2025-58181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-11-19T21:00:50.197590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2415997"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat. SSH servers utilizing `golang.org/x/crypto/ssh` and configured to process GSSAPI authentication requests are susceptible to unbounded memory consumption. An attacker can exploit this by sending specially crafted GSSAPI authentication requests, potentially leading to a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58181"
},
{
"category": "external",
"summary": "RHBZ#2415997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181"
},
{
"category": "external",
"summary": "https://go.dev/cl/721961",
"url": "https://go.dev/cl/721961"
},
{
"category": "external",
"summary": "https://go.dev/issue/76363",
"url": "https://go.dev/issue/76363"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4134",
"url": "https://pkg.go.dev/vuln/GO-2025-4134"
}
],
"release_date": "2025-11-19T20:33:42.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication"
},
{
"cve": "CVE-2025-58190",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-02-05T18:01:26.511908+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437110"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "RHBZ#2437110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437110"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58190",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4441",
"url": "https://github.com/golang/vulndb/issues/4441"
},
{
"category": "external",
"summary": "https://go.dev/cl/709875",
"url": "https://go.dev/cl/709875"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4441",
"url": "https://pkg.go.dev/vuln/GO-2026-4441"
}
],
"release_date": "2026-02-05T17:48:44.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net"
},
{
"cve": "CVE-2026-25680",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-05-22T16:01:05.431197+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480760"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). A flaw was found in golang.org/x/net/html where parsing crafted HTML can consume excessive CPU time, leading to denial of service. Exploitation requires user interaction (a victim application parsing attacker-controlled HTML). Most Red Hat products that bundle golang.org/x/net do not use the html parser to process untrusted HTML in their supported execution paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "RHBZ#2480760",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480760"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25680"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680"
},
{
"category": "external",
"summary": "https://go.dev/cl/781702",
"url": "https://go.dev/cl/781702"
},
{
"category": "external",
"summary": "https://go.dev/issue/79573",
"url": "https://go.dev/issue/79573"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5028",
"url": "https://pkg.go.dev/vuln/GO-2026-5028"
}
],
"release_date": "2026-05-22T15:01:21.805000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/net version 0.55.0 or later. As a workaround, do not use golang.org/x/net/html to parse untrusted HTML content, or enforce timeouts on HTML parsing operations. Applications that do not parse arbitrary HTML are not affected.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39817",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-07T20:01:43.510043+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \"go tool pack\" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the \"pack\" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "RHBZ#2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://go.dev/cl/767520",
"url": "https://go.dev/cl/767520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78778",
"url": "https://go.dev/issue/78778"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4979",
"url": "https://pkg.go.dev/vuln/GO-2026-4979"
}
],
"release_date": "2026-05-07T19:41:18.993000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-39825",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-05-07T20:01:37.714133+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467823"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s net/http/httputil package where ReverseProxy can forward query parameters that are hidden from Rewrite or Director functions. This occurs when the number of query parameters exceeds the url.ParseQuery limit (controlled by the GODEBUG setting urlmaxqueryparams). While Red Hat ships Go-based components across many products, exploitation requires that an application use ReverseProxy with a Rewrite or Director function that relies on query parameter inspection for security enforcement, which limits the practical impact of this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "RHBZ#2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://go.dev/cl/770541",
"url": "https://go.dev/cl/770541"
},
{
"category": "external",
"summary": "https://go.dev/issue/78948",
"url": "https://go.dev/issue/78948"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4976",
"url": "https://pkg.go.dev/vuln/GO-2026-4976"
}
],
"release_date": "2026-05-07T19:41:18.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Increase the maximum number of query parameters allowed by setting the GODEBUG environment variable `urlmaxqueryparams` to a higher value (e.g., `GODEBUG=urlmaxqueryparams=20000`), or validate and enforce security controls on query parameters at the backend service rather than relying solely on the ReverseProxy\u0027s Rewrite or Director function for security filtering.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls"
},
{
"cve": "CVE-2026-39826",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-07T20:01:46.305827+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only \u0027type\u0027 attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "RHBZ#2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39826",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://go.dev/cl/771180",
"url": "https://go.dev/cl/771180"
},
{
"category": "external",
"summary": "https://go.dev/issue/78981",
"url": "https://go.dev/issue/78981"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4980",
"url": "https://pkg.go.dev/vuln/GO-2026-4980"
}
],
"release_date": "2026-05-07T19:41:19.138000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping"
},
{
"cve": "CVE-2026-39827",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:32.990556+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480682"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. An authenticated SSH client can cause a Denial of Service (DoS) by repeatedly opening channels that are rejected by the server. This leads to unbounded memory growth, eventually crashing the server process and affecting all connected users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "RHBZ#2480682",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480682"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39827",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39827"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39827",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39827"
},
{
"category": "external",
"summary": "https://go.dev/cl/781320",
"url": "https://go.dev/cl/781320"
},
{
"category": "external",
"summary": "https://go.dev/issue/35127",
"url": "https://go.dev/issue/35127"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5016",
"url": "https://pkg.go.dev/vuln/GO-2026-5016"
}
],
"release_date": "2026-05-22T02:31:27.064000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39834",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-22T04:01:15.681060+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480676"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39834"
},
{
"category": "external",
"summary": "RHBZ#2480676",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480676"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39834",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39834"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834"
},
{
"category": "external",
"summary": "https://go.dev/cl/781663",
"url": "https://go.dev/cl/781663"
},
{
"category": "external",
"summary": "https://go.dev/issue/79567",
"url": "https://go.dev/issue/79567"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5020",
"url": "https://pkg.go.dev/vuln/GO-2026-5020"
}
],
"release_date": "2026-05-22T02:31:27.540000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-40356",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-04-28T07:01:37.543641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463368"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service flaw in MIT Kerberos 5 (krb5) allows an unauthenticated remote attacker to trigger an integer underflow and out-of-bounds read. This vulnerability, which can lead to process termination, specifically affects systems where the NegoEx mechanism is registered and `gss_accept_sec_context()` is called. While Kerberos is a fundamental service, the prerequisite of a registered NegoEx mechanism limits the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40356"
},
{
"category": "external",
"summary": "RHBZ#2463368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463368"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40356"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40356",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40356"
},
{
"category": "external",
"summary": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html",
"url": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html"
},
{
"category": "external",
"summary": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f",
"url": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f"
},
{
"category": "external",
"summary": "https://web.mit.edu/kerberos/advisories/",
"url": "https://web.mit.edu/kerberos/advisories/"
}
],
"release_date": "2026-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that the NegoEx mechanism is not registered in the `/etc/gss/mech` configuration file. Removing the corresponding entry from this file will prevent the vulnerable code path from being activated. This action may impact services that rely on the NegoEx GSS-API mechanism. A restart of affected Kerberos-dependent services may be required for the change to take effect.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-42506",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:02.675281+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in `golang.org/x/net/html` can lead to Cross-Site Scripting (XSS) in applications that process and render untrusted HTML, even when input sanitization is implemented. The vulnerability arises from an unexpected HTML tree structure generated during parsing, potentially allowing a remote attacker to execute arbitrary script code in the user\u0027s browser, leading to information disclosure or unauthorized actions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "RHBZ#2480759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506"
},
{
"category": "external",
"summary": "https://go.dev/cl/781700",
"url": "https://go.dev/cl/781700"
},
{
"category": "external",
"summary": "https://go.dev/issue/79571",
"url": "https://go.dev/issue/79571"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5025",
"url": "https://pkg.go.dev/vuln/GO-2026-5025"
}
],
"release_date": "2026-05-22T15:01:21.056000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/net version 0.55.0 or later. As a workaround, do not use golang.org/x/net/html to parse and re-render untrusted HTML content. Applications that do not parse arbitrary HTML are not affected.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-46598",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-05-22T04:01:24.490498+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480679"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. An attacker could provide specially crafted inputs that, when processed, lead to the creation of an ed25519.PrivateKey by casting malformed wire bytes. This improper input handling can cause the program to panic and crash, resulting in a Denial of Service (DoS) for the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate denial of service flaw exists in the `golang.org/x/crypto/ssh/agent` package. This vulnerability allows an attacker to provide specially crafted inputs that, when processed by the SSH agent, can lead to a program panic and crash. This could result in a temporary disruption of services that rely on the affected SSH agent functionality.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46598"
},
{
"category": "external",
"summary": "RHBZ#2480679",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480679"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46598"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46598",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46598"
},
{
"category": "external",
"summary": "https://go.dev/cl/781360",
"url": "https://go.dev/cl/781360"
},
{
"category": "external",
"summary": "https://go.dev/issue/79596",
"url": "https://go.dev/issue/79596"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5033",
"url": "https://pkg.go.dev/vuln/GO-2026-5033"
}
],
"release_date": "2026-05-22T02:31:27.986000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict the exposure of the SSH agent to untrusted sources. Avoid enabling SSH agent forwarding when connecting to untrusted hosts or environments. Ensure that applications interacting with `golang.org/x/crypto/ssh/agent` validate all inputs to prevent malformed data from being processed. Reloading or restarting SSH services may be required for changes to take effect.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input"
}
]
}
RHSA-2026:46885
Vulnerability from csaf_redhat - Published: 2026-07-27 16:35 - Updated: 2026-08-21 09:07Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update
Severity
Critical
Notes
Topic: The multicluster engine for Kubernetes 2.10 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Details: The multicluster engine for Kubernetes v2.10 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.
9.4 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Critical
A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.
8.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
References
162 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The multicluster engine for Kubernetes 2.10 General Availability release images,\nwhich add new features and enhancements, bug fixes, and updated container images.",
"title": "Topic"
},
{
"category": "general",
"text": "The multicluster engine for Kubernetes v2.10 images\n\nThe multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:46885",
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16242",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-17107",
"url": "https://access.redhat.com/security/cve/CVE-2026-17107"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46885.json"
}
],
"title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update",
"tracking": {
"current_release_date": "2026-08-21T09:07:10+00:00",
"generator": {
"date": "2026-08-21T09:07:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:46885",
"initial_release_date": "2026-07-27T16:35:23+00:00",
"revision_history": [
{
"date": "2026-07-27T16:35:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T09:07:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.10",
"product": {
"name": "multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.10::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Adf8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3Abd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ab516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Aa8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Aa3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Adffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Aad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ad98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Ae55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Af0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Ab57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Adb853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Aa8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Af99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Af84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Ac907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Aaf9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Afd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Ae82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ad9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Ae4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3Ac0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3Ad9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Afda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Af3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ad53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Adcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Af5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Aa4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Afe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ab9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3Ac46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Aa749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3Add602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Ab4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Adca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Ac446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Acd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ab7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3Ad944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Aa10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Aad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3Ac229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"acknowledgments": [
{
"names": [
"Microsoft Security Research (MSRC)"
],
"organization": "Microsoft"
}
],
"cve": "CVE-2026-16242",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-07-20T04:50:48.621000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502690"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the Konnectivity proxy-server used by hosted control planes allows a remote, unauthenticated attacker who can reach the agent-facing (cluster) endpoint to establish an agent connection without presenting a client certificate signed by the hosted cluster\u2019s Konnectivity CA, and without using token-based agent authentication. Because that endpoint is exposed so worker agents can connect, a successful attack can enroll an untrusted agent in the routing pool. When the proxy selects that stream for a control-plane dial, the attacker may proxy, inspect, modify, or drop control-plane-to-node traffic, affecting confidentiality, integrity, and availability of that path.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "RHBZ#2502690",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502690"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://github.com/openshift/hypershift/pull/9031",
"url": "https://github.com/openshift/hypershift/pull/9031"
}
],
"release_date": "2026-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Until an update that configures Konnectivity agent authentication is applied, restrict network access to the Konnectivity cluster (agent) endpoint so that only trusted worker networks can reach it. For NodePort or LoadBalancer publishing, limit ingress to port 8091 to worker node subnet ranges. For Route-based publishing, restrict access to the Konnectivity route to trusted networks where possible. These controls reduce the chance that an unauthenticated attacker can reach the agent listener; they do not replace proper agent client-certificate (or token) authentication.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates"
},
{
"acknowledgments": [
{
"names": [
"Kahiro Okina"
],
"organization": "Craftsman Software, Inc."
},
{
"names": [
"Arpit Jain"
],
"organization": "GitHub: arpitjain099"
}
],
"cve": "CVE-2026-17107",
"cwe": {
"id": "CWE-441",
"name": "Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)"
},
"discovery_date": "2026-05-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506771"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the cluster-proxy service-proxy component of Red Hat Advanced Cluster Management for Kubernetes and multicluster-engine that allows an authenticated hub principal to escalate privileges to cluster-admin across all managed clusters. This is due to improper handling of impersonation group headers, enabling unauthorized administrative access. While the impact of successful exploitation is severe, the attack requires authenticated access to the ACM hub cluster, which is a management-plane component not typically exposed to untrusted networks. Exploitation also depends on knowledge of the cluster-proxy architecture and deliberate construction of requests targeting specific managed clusters. These prerequisites significantly reduce the likelihood of opportunistic or widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-17107"
},
{
"category": "external",
"summary": "RHBZ#2506771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-17107",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-17107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17107"
}
],
"release_date": "2026-07-24T18:49:48.386000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…